This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa File: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (raw, json) Hash identifier: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI= Subject key identifier: C5:1A:96:CC:02:3B:77:CE:3F:C3:15:05:A7:48:43:23:22:BF:3A:3A Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA719C58E708254941788FCB1CF434C Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215341 IP address blocks: 2a0d:2146:8660::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:19:c5:8e:70:82:54:94:17:88:fc:b1:cf:43:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c51a96cc023b77ce3fc31505a748432322bf3a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cc:7a:72:dc:66:31:36:56:7e:6a:34:be:b9: 63:5a:c6:d7:a8:85:e6:53:68:cc:fe:6f:69:41:0a: 53:8b:b7:36:44:94:5d:89:d6:b8:d8:42:a1:aa:5b: 45:da:cc:e1:96:ae:94:f9:f2:99:77:6b:5e:fc:03: 0e:c3:f6:8e:a8:e0:5f:48:db:47:bc:fe:24:ed:77: 1b:37:24:91:cc:a0:e0:cf:07:86:6f:d4:30:d7:4f: 74:33:f6:0a:88:31:5c:56:44:26:ba:b5:37:89:92: 43:ab:26:c4:16:b7:c7:8f:d6:4a:0c:cc:40:57:57: 3a:08:40:42:1f:18:ab:68:1e:4a:39:4f:e6:5b:98: 31:f7:ef:79:08:1a:30:f0:e7:4b:25:3f:22:ad:c9: 90:ba:e6:a1:f2:ac:1b:af:4b:09:61:a2:cc:cc:b3: e1:8b:88:cb:e9:bf:42:8f:e1:49:ec:c4:35:4a:1e: 7a:71:de:78:f7:6e:61:a4:d5:5f:12:70:f6:be:a1: 21:c6:6c:63:08:8e:e6:a5:22:8e:43:9a:e9:0a:93: 89:00:74:a9:4a:13:24:54:54:df:a9:d0:2f:0a:34: 9b:ac:f9:84:3e:8c:5e:11:b9:8a:5b:ec:b5:30:5e: 3d:01:17:65:ca:4c:2b:5f:40:5f:04:c1:ab:be:a6: 7c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1A:96:CC:02:3B:77:CE:3F:C3:15:05:A7:48:43:23:22:BF:3A:3A X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2146:8660::/44 Signature Algorithm: sha256WithRSAEncryption 14:bf:3d:a8:76:34:f5:16:3d:0a:ad:e4:e9:f7:b6:62:2a:b1: 4e:23:eb:aa:01:24:6f:78:ad:a5:ee:0f:35:6d:fe:41:43:40: d3:db:b8:6e:56:eb:95:5e:30:8d:4d:5c:5b:aa:9a:1e:c0:be: dc:c2:43:e0:b4:14:3b:32:79:41:73:a9:40:b9:a1:38:66:96: 7c:0a:4a:1b:6c:1e:75:42:d0:f3:12:f4:a0:ac:2b:48:e1:3a: a6:2d:3d:e4:a6:ab:ca:25:03:08:cf:ce:32:4f:9e:e0:9a:20: 5e:a3:53:6b:18:e5:90:ab:0a:4e:89:65:c0:6c:17:3f:b2:a7: c0:9a:2b:f2:15:1e:d3:30:ce:f5:b2:ca:aa:75:6e:6f:cc:cd: 59:72:10:55:95:8d:61:e3:5e:22:69:eb:04:54:75:fb:40:7b: 67:75:70:36:e3:b1:47:5a:31:f9:91:16:fc:4a:01:c9:d5:c8: f0:d0:f9:9f:3e:97:b6:d1:4a:68:08:62:14:ab:ed:8d:33:db: 34:3b:bf:68:5a:b1:ff:57:83:83:6e:af:fb:52:96:bd:30:85: de:e7:76:51:65:2b:7a:2e:01:5b:2a:1c:20:da:13:2e:2b:8c: 8d:ba:27:32:eb:2d:f2:63:bb:29:05:94:f6:d9:02:7a:31:c5: bb:d3:33:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxnFjnCCVJQXiPyxz0NMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTFhOTZjYzAyM2I3N2NlM2ZjMzE1MDVhNzQ4NDMyMzIyYmYzYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Mx6ctxmMTZWfmo0vrljWsbXqIXm U2jM/m9pQQpTi7c2RJRdida42EKhqltF2szhlq6U+fKZd2te/AMOw/aOqOBfSNtH vP4k7XcbNySRzKDgzweGb9Qw1090M/YKiDFcVkQmurU3iZJDqybEFrfHj9ZKDMxA V1c6CEBCHxiraB5KOU/mW5gx9+95CBow8OdLJT8ircmQuuah8qwbr0sJYaLMzLPh i4jL6b9Cj+FJ7MQ1Sh56cd54925hpNVfEnD2vqEhxmxjCI7mpSKOQ5rpCpOJAHSp ShMkVFTfqdAvCjSbrPmEPoxeEbmKW+y1MF49ARdlykwrX0BfBMGrvqZ8NwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMUalswCO3fOP8MVBadIQyMivzo6MB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEveFJxV3pBSTdkODRfd3hVRnAwaERJeUtfT2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRoZg MA0GCSqGSIb3DQEBCwUAA4IBAQAUvz2odjT1Fj0KreTp97ZiKrFOI+uqASRveK2l 7g81bf5BQ0DT27huVuuVXjCNTVxbqpoewL7cwkPgtBQ7MnlBc6lAuaE4ZpZ8Ckob bB51QtDzEvSgrCtI4TqmLT3kpqvKJQMIz84yT57gmiBeo1NrGOWQqwpOiWXAbBc/ sqfAmivyFR7TMM71ssqqdW5vzM1ZchBVlY1h414iaesEVHX7QHtndXA247FHWjH5 kRb8SgHJ1cjw0PmfPpe20UpoCGIUq+2NM9s0O79oWrH/V4ODbq/7Upa9MIXe53ZR ZSt6LgFbKhwg2hMuK4yNuicy6y3yY7spBZT22QJ6McW70zPy -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:02 2026 by rpki-client